Governance, Risk & Compliance Officer

Management Level

F

Role Summary

The Governance, Risk & Compliance Officer supports the delivery of audit, compliance and risk activities across DSD. The role manages audit responses, maintains governance and risk records, supports control assurance activity, and works with stakeholders to ensure risks, actions and evidence are managed effectively.

Professional Responsibilities -

• Audit: Supports and coordinates audit activity through to completion, ensuring requests are well managed, evidence is accurate, and responses are provided in a timely manner.
• Audit relationships: Works with internal and external auditors to clarify requirements, agree deliverables, track progress and escalate risks or blockers where required.
• Governance: Supports the operation of agreed governance frameworks, ensuring processes, controls, records and reporting are maintained and followed consistently.
• Stakeholder engagement: Involves specialists, control owners and domain experts as needed to ensure risks, controls and audit responses are understood and appropriately managed.
• Risk: Carries out risk management activities within a specific function, technical area or project, including identifying, assessing, tracking and reporting risks, issues and vulnerabilities.
• Mitigation: Supports the development and monitoring of mitigation actions, ensuring owners, due dates and evidence are clearly recorded.

Technical Responsibilities

• Maintains documentation of risks, threats, vulnerabilities, controls, issues and mitigation actions in approved systems and repositories.
• Supports evidence gathering, validation and audit trail maintenance to ensure audit and compliance records are complete, accurate and defensible.
• Uses reporting and workflow tools to track audit requests, risk actions, control activity and overdue items.
• Analyses data to identify trends, gaps, exceptions or emerging risks, and prepares clear management information for stakeholders.
• Supports continuous improvement by identifying opportunities to simplify, automate or improve governance, compliance and risk processes.

Education and Experience

• Essential: Experience supporting governance, compliance, risk, audit, control or assurance activities.
• Essential: Strong documentation, communication and stakeholder management skills.
• Essential: Ability to manage multiple requests, deadlines, evidence requirements and follow-up actions.
• Desirable: Knowledge of NY DFS, UK CASS, SOC, ISO 27001, SOX or similar governance, compliance, risk, control or audit frameworks.
• Desirable: B.Sc. in a relevant subject, or equivalent professional experience. M.Sc. or relevant professional qualification is advantageous.
• Desirable: Experience using GRC, workflow, audit management, reporting or data analysis tools.

Professional Skills and Qualities

• Excellent written and verbal communication skills
• Strong attention to detail and commitment to accuracy
• Documentation, evidence management and technical writing
• Analytical capability across business processes, controls and data
• Ability to understand and digest complex concepts quickly
• Problem solving and root cause analysis
• Stakeholder management, including the ability to follow up, challenge constructively and escalate appropriately
• Ability to produce clear management information, status updates and audit-ready outputs

Personal Skills and Qualities

• Curiosity, Enthusiasm and optimism
• Collaboration, teamwork and cooperation
• Active listening and observation
• Initiative and sound judgement
• Ownership, dependability and accountability
• Continuous learning and adaptability
• Clear and concise communication
• Creative thinking and innovation
• Resilience, perseverance and patience
• Effective time management and prioritisation

Tooling

• Microsoft 365, including Teams, Outlook, SharePoint, Excel and Word
• Microsoft Copilot and other productivity or automation tools
• LogicGate or equivalent GRC tooling
• Azure DevOps or equivalent workflow and action tracking tools
• Power BI, Excel or equivalent reporting and data analysis tools
• ServiceNow or equivalent service management tooling

Domain Knowledge

• Understanding of governance, compliance and risk principles, including control assurance, audit evidence, issue management and risk mitigation.
• Awareness of audit lifecycle activities, including request management, evidence collection, walkthroughs, findings, actions and closure.
• Understanding of technology risk, operational risk, control frameworks and regulatory or assurance requirements relevant to DSD.
• Ability to work with technical teams, control owners, risk owners, auditors and senior stakeholders to support effective governance and compliance outcomes.

We are committed to equality of opportunity for all staff and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships. Please note any offer of employment is subject to satisfactory pre-employment screening checks.